Product · Google

protobuf-java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.7

CVE-2024-7254

Stack overflow in Protocol Buffers Java Lite

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPar…

Google protobuf-java google-protobuf [JRuby Gem] protobuf-kotlin Debian Ubuntu Maven RubyGems

Sep 19, 2024
High 7.5

CVE-2021-22569 Public exploit

Denial of Service of protobuf-java parsing procedure

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…

Google protobuf-kotlin protobuf-java google-protobuf [JRuby Gem] Debian Ubuntu Maven RubyGems

Jan 7, 2022